- XPT SoftwareAustralia PTY Ltd, incorporated in 2016, is a Software Services company

- XPT works with topclients across Australia in Banking, Insurance, Telecom,Retail, Energy, Mining and Manufacturingdomains.

- We have 120+technocrats in Australia working at our clientlocations.

- XPT SoftwareAustralia is part of group companies which has globalpresence across India & Europe.

- We have served100+ clients globally, fulfilling their onsite-offshoreneeds.

Role Summary

The Cyber Security Engineer isresponsible for supporting NIST CSF / NIST 800 assessments, triagingpenetration test findings, and driving remediation activities acrossapplication, infrastructure, network security, and monitoring platforms.

The role is hands-on and deliveryfocused, working closely with architects, platform owners, SOC, andinfrastructure/application teams to translate security findings into actionablefixes, validate control effectiveness, and support audit‑ready evidence forregulated/government environments.

Key Responsibilities

NIST Assessment Support (CSF / NIST 800Series)

- SupportNIST CSF / NIST 800‑53 / 800‑61 / 800‑92 assessments through:

- Controlevidence collection

- Gapanalysis support

- Mappingtooling controls to NIST requirements

- Assistarchitects and governance teams in preparing:

- Controlimplementation summaries

- Toolcapability mapping

- Evidencepacks for audits and client reviews

- Trackand manage security gaps, risks, and remediation actions in line withagreed timelines

- Supportcontinuous improvement initiatives driven by assessment outcomes

Penetration Test Findings &Remediation;

- Triageand analyse application, infrastructure, and network penetration testfindings

- Workwith platform and application teams to:

- Prioritiseremediation based on risk and exploitability





- Executeor support remediation actions such as:

- Controlenablement or enhancement

- Trackremediation status and provide explicit closure evidence for governance andaudit forums

- Activitiesinclude:

- Policytuning and baseline hardening

- Coverageand health checks

- Supportingremediation of vulnerabilities and misconfigurations

Support security controls across:

- Ciscosecurity platforms

- Imperva

- MicrosoftGSA / related network security controls

Responsibilities include:

- Supportingfirewall / network security rule reviews and clean‑ups

- Assistingwith remediation of network‑related pen test findings

- Supportingchange validation and post‑implementation checks

- Workingwith network teams to ensure security controls align with NIST and secure‑by‑designprinciples

- SupportSIEM and monitoring platforms:

- Splunk

- MicrosoftSentinel

- Assistwith:

- Detection coverage checks related to NIST andpen test scenarios

- Validation that remediated controls generateexpected telemetry

- SupportSOC teams with investigation data where required

- Remediationactions

- Controlchanges

- Evidencerequired for audits and MSSR / governance reviews

- Incident and problem reviews (P1 / P2 support)

- Root cause analysis where control gaps areidentified

- Followstructured change and release processes (CAB, validation, rollback awareness)

Skills &Experience;

- 5 years experience in security engineering / SecOps / blue teamroles

- Exposure to NIST CSF or NIST 800 frameworks

- Hands‑on experience supporting remediation across:

- Endpoint / infrastructuresecurity tools

- Vulnerability managementplatforms

- Network security controls

- Experience working with penetration test reports and remediationtracking

- Familiarity with SIEM platforms (Splunk and/or Sentinel)

#J-18808-Ljbffr

📌 SOC Analyst (Melbourne)
🏢 XPT Software
📍 Melbourne